Skip to content

Analysis of Data from Mobile Voting Pilots

Nimit Sawhney

Shares empirical attack telemetry and threat vector data collected across real-world smartphone mobile voting pilot deployments.

Summary

Telemetry from Live Mobile Voting Pilots

Deploying mobile smartphone voting applications in pilot jurisdictions across the United States generated extensive telemetry on remote attack attempts and malicious probing.

Empirical Threat Vector Analysis

Analysis of collected telemetry categorizes attacks by geographic origin, duration, and lethality, detailing coordinated attempts to compromise client devices and backend application APIs.

Evaluating Defensive Mitigations

Comparing successful and unsuccessful defensive countermeasures highlights the effectiveness of rate limiting, client attestation, and API shielding against automated vulnerability scanning.

Public Release of Anonymized Attack Datasets

Publishing anonymized threat data in the public domain provides independent election researchers with empirical baselines to study adversary tradecraft targeting mobile ballot return platforms.

Related talks

Voting Village·25 min

  • DEF CON
  • Policy
  • Date: Aug 2021
  • Location: Las Vegas

Harri Hursti

Voting Village co-founder Harri Hursti welcomes in-person and virtual attendees to DEF CON 29, framing key research themes and voting machine testing labs.

voting-villagedefconelection-security+1